My computer is being controlled by remote host using powershell wmi

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 9
    windows 7 Home Premium
    Thread Starter
       #11

    Thanks but as soon as I plug in the network cable the same thing will happen again, correct?
      My Computer


  2. Posts : 1,167
    W10 32 bit, XUbuntu 18.xx 64 bit
       #12

    Tyfahra said:
    Thanks but as soon as I plug in the network cable the same thing will happen again, correct?
    Not sure but it shouldn't. I am asking for more help on this.

    I am also trying to find out if you need to use the clean all or just the clean per each drive. Clean is faster than clean all.

    Here is how to do the clean command use the installation disk, as I described in my previous post.

    Diskpart hit enter
    list disk hit enter
    Select Disk 0 hit enter
    Clean hit enter
    exit hit enter
    Hard reset, then install windows 7


    If you have more that one hard drive installed repeat the step above for each drive and replace the 0 for each of your drives. If you have a external USB hard drive, do not connect it, while doing this.
    Last edited by groze; 27 Apr 2015 at 11:59.
      My Computer

  3.    #13

    Do you have all of your data backed up? If not copy it now to flash stick or external drive quarantine, to be fully scanned with Malwarebytes and SuperAntiSpyware before reimporting into new install. Report back to our Security forum the exact infections including logs which these scans find so they can recommend deeper scans before you reimport the data. Or do not reimport the data at all.

    Then boot the Win7 disk into System Recovery Options to run Diskpart Clean All Command.

    If in doubt about or in need of installation media, refer to Step 1 of Clean Reinstall Windows 7. On an uninfected PC that checks out clean with both of the above scans, confirm the ISO HASH or download a fresh ISO to burn to disk or flash stick using the tools provided. I have never seen the installation media be infected but you can be certain of this if the HASH matches on the ISO and you burn a fresh disk or stick on the uninfected PC.

    This wipes the disk so thoroughly nothing can survive. There is nothing now that can invade your new install unless reimported with data that has not been thoroughly scanned from its quarantine location.

    Now do a Clean Reinstall Windows 7 following those steps, using only the tools and methods suggested which assure you will get and keep a perfect install just like 1.4+ million others have without a single complaint. None of them have ever returned here who used those steps to say they were reinfected or had any other single problem.

    Again, do not reimport your data until all scans come up clean. To be sure of this report anything found in scans to our Security forum.
      My Computer


  4. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #14

    Have you turned off "autorun/autplay"?
    In all versions of Windows from XP to Windows 7, Autorun is executed before Autoplay, unless Autorun is disabled. If it’s not disabled, Autorun will execute and it will search for the Autorun.inf file.
    AutoPlay - Turn On or Off

    If you've downloaded a game (or anything else) from someone's infected flash drive, this would cause the 'bot' to run automatically.

    Disconnect from the net, unplug the modem. Follow Brink's tutorial above.

    Next.... make sure Proxy settings are disabled.
    1) Under “Tools” in the browser tool bar select “Internet Options”.
    2) In the “Internet Options” window that pops up, click the “Connections” tab at the top.
    3) Click “LAN Settings” near the bottom of the “Connections” section.
    4) If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it.
    5) Click “Ok” to close the “Local Area Network (LAN) Settings” window.
    6) Click “Ok” to close the “Internet Options” window.
    Reboot

    Now, Copy and paste these lines in Note pad.

    @Echo on
    pushd\windows\system32\drivers\etc
    attrib -h -s -r hosts
    echo 127.0.0.1 localhost>HOSTS
    attrib +r +h +s hosts
    popd
    ipconfig /release
    ipconfig /renew
    ipconfig /flushdns
    netsh winsock reset all
    netsh int ip reset all
    shutdown -r -t 1
    del %0


    Save as flush.bat to your desktop.
    Right click on the flush.bat file to run it as Administrator. Reboot once again

    Run your Anti-virus program.

    Before connecting your computer back to the Internet, find a known "clean" computer and change ALL your passwords... do not do that using the infected computer!

    After doing all above reboot. Make sure "Proxy server" is still disabled under your LAN Settings.
    Test whether internet connectivity is restored.
      My Computer


  5. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #15

    Please let us know what you're experiencing now.
      My Computer


  6. Posts : 9
    windows 7 Home Premium
    Thread Starter
       #16

    I did create a back up and it worked once. The option to restore from back up disk is not there anymore. They removed it. They even took out the windows experience benchmark. The one that rates your computer and tells you what components to upgrade. They changed the Microsoft agreement so that it's legal for them to do this, and microspft is not responsible. I tried to contact my friend who is a lawyer the email got sent back to me. I have voip or voice over internet home phone so they pretty much took control of all my communications. I got rid of my cell phone. I don't do anything to deserve this type of shit.
      My Computer


  7. Posts : 9
    windows 7 Home Premium
    Thread Starter
       #17

    Oh thanks jacee I will try that. Ill let you know im gonna try that right now
      My Computer


  8. Posts : 9
    windows 7 Home Premium
    Thread Starter
       #18

    Also wanted to say I have some weird programs on my computer.
    Like a anything goes version of microsft word.
      My Computer


  9. Posts : 9
    windows 7 Home Premium
    Thread Starter
       #19

    Looks like it removed the teredo and isatap tunnels in ip config. That's a good thing. I may be connected to remote host who is doing this. so all my internet traffic and phone goes through this remote host. they are the ones using the snap ins to manage my pc. Ill let you know how it goes.
      My Computer


  10. Posts : 9
    windows 7 Home Premium
    Thread Starter
       #20

    Check out this fake microsoft privacy policy.
    Microsoft may access or disclose information about you, including the content of your communications, in order to: (a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of Microsoft or our customers, including the enforcement of our agreements or policies governing your use of the software; or (c) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Microsoft employees, customers, or the public.
    Information collected by or sent to Microsoft by Windows 7 may be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries, or service providers maintain facilities. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union.
    CHOICE AND CONTROL

    I hope im the only one that has this policy on my computer.
    I know Microsoft didn;'t write this policy.
      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 07:22.
Find Us